Design/Logic Flaw

systerm.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client,...

FreeBSD telnetd守护程序远程代码执行漏洞

BUGTRAQ ID: 33777 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 telnet协议允许传送telnet通讯中的环境变量并分配给tcp连接的另一端。FreeBSD的telnet守护程序在执行/bin/login之前没有检查LD 如LDPRELOAD环境变量，因此攻击者可以在传送的环境变量中包含LDPRELOAD标识和文件系统上带有恶意代码的预编译库值。在以用户id和组id 0（root）执行/bin/login时，就会通过telnet环境定义预加载远程连接所设置的库并执行。...

CVE-2009-0641

systerm.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client,...

CVE-2009-0641

CVE-2009-0641 affects FreeBSD telnetd (sys_term.c) in 7.0-RELEASE and other 7.x releases. The vulnerability stems from environment-variable handling where dangerous vars were not scrubbed using a method valid only in older FreeBSD distributions, enabling remote attackers to execute arbitrary code...

FreeBSD Security Advisory (FreeBSD-SA-09:05.telnetd.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:05.telnetd.asc SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD telnetd privilege escalation

LDxxx environment variable are not cleared on 'login' execution, makeing it's possible to execute code witi root privileges. For remote exploitation it's required to have ability to upload the file to remote system via FTP, Web, etc...

FreeBSD Security Advisory FreeBSD-SA-09:05.telnetd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:05.telnetd Security Advisory The FreeBSD Project Topic: telnetd code execution vulnerability Category: core Module: contrib Announced: 2009-02-16 Affects:...

FreeBSD telnetd sys_term.c Environment Variable Handling Privilege Escalation (FreeBSD-SA-09:05)

A flaw in the environment-handling code used by the telnet server running on the remote host fails to scrub the environment of variables such as 'LDPRELOAD' before calling the login program. An attacker who can place an arbitrary library on the remote host, either as a local user or remotely...

FreeBSD 'telnetd' Daemon Remote Code Execution Vulnerability

FreeBSD is prone to a remote code-execution vulnerability. Remote attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will facilitate in the complete compromise of affected computers. FreeBSD 7.0-RELEASE is vulnerable; other...

FreeBSD-SA-09:05.telnetd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:05.telnetd Security Advisory The FreeBSD Project Topic: telnetd code execution vulnerability Category: core Module: contrib Announced: 2009-02-16 Affects:...

FreeBSD telnetd Privilege Escalation

FreeBSD 7.0-RELEASE telnet daemon local privilege escalation - And possible remote root code excution. There is a rather big bug in the current FreeBSD telnetd daemon. The environment is not properly sanitized when execution /bin/login, what leads to a possible remote root hole. The telnet protoc...

T-Mobile G1 phone Google Android protection bypass

Pplication can run telnetd with root privileges...

Applications can open up remote root access on G1 Phone

Hi, Google Android applications on the T-Mobile G1 can spawn a telnetd that gives remote root access to your phone: http://www.android-unleashed.com/2008/11/howto-get-root-on-your-android-g1-and.html This particular method needs user interaction, but a rogue Android app could easily run telnetd...

Gentoo Security Advisory GLSA 200410-03 (netkit-telnetd)

The remote host is missing updates announced in advisory GLSA 200410-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200506-24 (heimdal)

The remote host is missing updates announced in advisory GLSA 200506-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200503-36 (netkit-telnetd)

The remote host is missing updates announced in advisory GLSA 200503-36. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200410-03 (netkit-telnetd)

The remote host is missing updates announced in advisory GLSA 200410-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200503-36 (netkit-telnetd)

The remote host is missing updates announced in advisory GLSA 200503-36. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: SSLtelnet

The remote host is missing an update to the system as announced in the referenced advisory. VID 4aec9d58-ce7b-11d8-858d-000d610a3b12 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 616-1 (netkit-telnet-ssl)

The remote host is missing an update to netkit-telnet-ssl announced via advisory DSA 616-1. OpenVAS Vulnerability Test $Id: deb6161.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 616-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...